This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/udvlW2PyvqXtfqtYnp36cUtrcfE.roa File: udvlW2PyvqXtfqtYnp36cUtrcfE.roa (raw, json) Hash identifier: 8+BSpI61gme3zl2ykADzSHcLsXJy1/ZaYyCb2tG/k64= Subject key identifier: B9:DB:E5:5B:63:F2:BE:A5:ED:7E:AB:58:9E:9D:FA:71:4B:6B:71:F1 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019ADED2818E77F3B12E4360167DC48E43A6 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/udvlW2PyvqXtfqtYnp36cUtrcfE.roa Signing time: Tue 02 Dec 2025 11:28:48 +0000 ROA not before: Tue 02 Dec 2025 11:28:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 185.199.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:d2:81:8e:77:f3:b1:2e:43:60:16:7d:c4:8e:43:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Dec 2 11:28:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b9dbe55b63f2bea5ed7eab589e9dfa714b6b71f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:51:98:16:fb:b2:ae:26:8d:c0:04:7e:64:e7: 2a:41:97:34:04:4a:43:4a:bb:1e:b0:2d:4e:1e:07: 5c:62:08:38:7c:2c:8b:bf:ba:23:bc:4f:b3:ad:8a: 57:5a:67:08:b2:2a:d0:90:60:30:5c:8d:24:de:dc: 78:71:70:77:ef:a0:98:22:76:e8:f6:dc:46:ba:44: 9b:06:1e:7f:61:0c:70:d2:72:8b:0b:29:56:80:81: 5a:db:29:6d:0b:b3:48:3f:e2:ae:c9:4e:f8:dc:6a: 4e:77:ce:e9:a4:3b:19:d6:76:cf:88:20:b2:bb:1c: 55:5d:71:89:4c:69:c2:bb:a3:91:a7:5d:0d:91:e9: 53:7f:c7:2e:85:49:65:c9:3e:d9:0a:45:f5:57:26: 83:5e:2a:fe:32:21:01:42:95:45:0d:c3:da:ee:0e: 3b:a9:20:dd:c2:59:ff:53:72:53:5e:c4:9f:ce:f8: 0e:c2:2f:3e:22:b3:8c:79:96:11:37:fe:fa:90:44: b0:19:26:be:7a:58:b6:26:4d:0a:c6:e1:20:d3:24: 2c:07:b9:36:dc:2f:e2:c4:6d:9e:52:15:1d:8a:ef: d5:00:aa:3a:ce:9a:e4:2f:8f:74:de:9c:79:1e:a1: 1d:52:8a:6e:5b:c2:bf:af:90:d4:ed:e9:b5:19:65: 81:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DB:E5:5B:63:F2:BE:A5:ED:7E:AB:58:9E:9D:FA:71:4B:6B:71:F1 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/udvlW2PyvqXtfqtYnp36cUtrcfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.159.0/24 Signature Algorithm: sha256WithRSAEncryption 28:4b:56:25:25:dc:0e:83:ef:69:52:c3:aa:96:05:e2:b8:36: e1:88:a3:58:09:0c:be:7a:d5:e6:f8:ce:b6:85:90:69:b5:d1: 05:f5:95:bd:5e:c1:87:9f:25:30:69:c3:00:eb:5c:f0:af:72: af:75:46:1a:53:bd:36:a6:7b:68:1c:be:a2:af:d0:26:90:d6: 23:30:d2:a3:68:88:31:80:9b:36:5f:06:66:24:34:1a:45:71: ee:85:88:c1:04:41:f8:ad:a5:04:cf:01:ce:4f:06:18:c9:4e: 67:fe:78:fa:8d:45:e1:33:49:b1:96:1a:f9:ba:d1:77:3f:e5: 44:ca:a7:60:b4:4b:cd:4d:f9:f4:71:cb:2a:6d:cb:40:6d:a7: e8:00:e5:cd:91:0d:27:c2:5c:b1:41:82:b3:c1:19:3a:23:d3: 62:04:3e:bc:2e:90:87:66:16:0c:b4:f7:e2:9e:93:8c:c7:28: 36:09:54:8f:e7:fc:ab:1a:16:95:d0:9d:37:80:1c:14:4b:ad: d1:15:7f:85:58:15:9b:1f:59:bc:61:78:35:06:8d:aa:35:53: b5:cb:1f:c9:f0:b0:89:db:5d:ae:a4:e2:a5:18:fe:46:13:be: c4:cc:17:0b:24:c7:0e:ad:81:0d:94:19:3a:87:c4:b0:23:48: 39:27:14:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZre0oGOd/OxLkNgFn3EjkOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjUxMjAyMTEyODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWRiZTU1YjYzZjJiZWE1ZWQ3ZWFiNTg5ZTlkZmE3MTRiNmI3MWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VGYFvuyriaNwAR+ZOcqQZc0BEpD SrsesC1OHgdcYgg4fCyLv7ojvE+zrYpXWmcIsirQkGAwXI0k3tx4cXB376CYInbo 9txGukSbBh5/YQxw0nKLCylWgIFa2yltC7NIP+KuyU743GpOd87ppDsZ1nbPiCCy uxxVXXGJTGnCu6ORp10NkelTf8cuhUllyT7ZCkX1VyaDXir+MiEBQpVFDcPa7g47 qSDdwln/U3JTXsSfzvgOwi8+IrOMeZYRN/76kESwGSa+eli2Jk0KxuEg0yQsB7k2 3C/ixG2eUhUdiu/VAKo6zprkL4903px5HqEdUopuW8K/r5DU7em1GWWBVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLnb5Vtj8r6l7X6rWJ6d+nFLa3HxMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvdWR2bFcyUHl2cVh0ZnF0WW5wMzZjVXRyY2ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucefMA0G CSqGSIb3DQEBCwUAA4IBAQAoS1YlJdwOg+9pUsOqlgXiuDbhiKNYCQy+etXm+M62 hZBptdEF9ZW9XsGHnyUwacMA61zwr3KvdUYaU702pntoHL6ir9AmkNYjMNKjaIgx gJs2XwZmJDQaRXHuhYjBBEH4raUEzwHOTwYYyU5n/nj6jUXhM0mxlhr5utF3P+VE yqdgtEvNTfn0ccsqbctAbafoAOXNkQ0nwlyxQYKzwRk6I9NiBD68LpCHZhYMtPfi npOMxyg2CVSP5/yrGhaV0J03gBwUS63RFX+FWBWbH1m8YXg1Bo2qNVO1yx/J8LCJ 212upOKlGP5GE77EzBcLJMcOrYENlBk6h8SwI0g5JxS/ -----END CERTIFICATE-----Generated at Fri Dec 5 08:04:36 2025 by rpki-client